Authorization Bypass Through User-Controlled Key

Overview open-webui is an Open WebUI Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key via the getimagebase64fromurl function. An attacker can access files belonging to other users by supplying a file identifier in the imageurl.url field that doe...

PT-2019-1419

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to improper disclosure of file information by Windows, potentially allowing attackers to read the contents of files on the disk using a specially crafted application. Thi...